Fcbtest snap appears to have it's own openstack client
On Mon, Aug 16, 2021, 8:21 PM Jeff Hillman <email address hidden>
wrote:
> Yes.
>
> On Mon, Aug 16, 2021, 8:20 PM Billy Olsen <email address hidden>
> wrote:
>
>> The last update for the openstackclients snap includes the ability to
>> use the system provided certs [0]. Are the certs installed into the
>> local system which is being used for the test?
>>
>> [0] - https://opendev.org/x/snap-
>> openstackclients/commit/79de448e28cbcac747bc88811536466da6681165
>>
>> ** Changed in: snap-openstackclients
>> Status: New => Incomplete
>>
>> --
>> You received this bug notification because you are subscribed to the bug
>> report.
>> https://bugs.launchpad.net/bugs/1936824
>>
>> Title:
>> Manila rally tests fail when using a cacert.
>>
>> Status in OpenStack Clients Snap:
>> Incomplete
>>
>> Bug description:
>> It seems to be happening because FCE is using the snap openstack
>> client:
>>
>> # snap client:
>>
>> $ /snap/bin/openstack share list
>> HTTPSConnectionPool(host='[REDACTED]', port=8786): Max retries exceeded
>> with url: /v2/623996b41af44b2693dd5f231a6b812a/shares/detail (Caused by
>> SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify
>> failed (_ssl.c:852)'),))
>>
>> # deb client
>>
>> $ openstack share list
>> <NO ERROR OR WARNING IS SHOWN>
>>
>> # manila command
>>
>> $ manila list
>> /usr/lib/python3/dist-packages/urllib3/connection.py:391:
>> SubjectAltNameWarning: Certificate for [REDACTED] has no `subjectAltName`,
>> falling back to check for a `commonName` for now. This feature is being
>> removed by major browsers and deprecated by RFC 2818. (See
>> https://github.com/urllib3/urllib3/issues/497 for details.)
>> warnings.warn(
>> /usr/lib/python3/dist-packages/urllib3/connection.py:391:
>> SubjectAltNameWarning: Certificate for [REDACTED] has no `subjectAltName`,
>> falling back to check for a `commonName` for now. This feature is being
>> removed by major browsers and deprecated by RFC 2818. (See
>> https://github.com/urllib3/urllib3/issues/497 for details.)
>> warnings.warn(
>> /usr/lib/python3/dist-packages/urllib3/connection.py:391:
>> SubjectAltNameWarning: Certificate for [REDACTED] has no `subjectAltName`,
>> falling back to check for a `commonName` for now. This feature is being
>> removed by major browsers and deprecated by RFC 2818. (See
>> https://github.com/urllib3/urllib3/issues/497 for details.)
>> warnings.warn(
>> /usr/lib/python3/dist-packages/urllib3/connection.py:391:
>> SubjectAltNameWarning: Certificate for [REDACTED] has no `subjectAltName`,
>> falling back to check for a `commonName` for now. This feature is being
>> removed by major browsers and deprecated by RFC 2818. (See
>> https://github.com/urllib3/urllib3/issues/497 for details.)
>> warnings.warn(
>>
>> +----+------+------+-------------+--------+-----------+-----------------+------+-------------------+
>> | ID | Name | Size | Share Proto | Status | Is Public | Share Type Name
>> | Host | Availability Zone |
>>
>> +----+------+------+-------------+--------+-----------+-----------------+------+-------------------+
>>
>> +----+------+------+-------------+--------+-----------+-----------------+------+-------------------+
>>
>> To manage notifications about this bug go to:
>>
>> https://bugs.launchpad.net/snap-openstackclients/+bug/1936824/+subscriptions
>>
>>
Fcbtest snap appears to have it's own openstack client
On Mon, Aug 16, 2021, 8:21 PM Jeff Hillman <email address hidden>
wrote:
> Yes. /opendev. org/x/snap- s/commit/ 79de448e28cbcac 747bc8881153646 6da6681165 lients /bugs.launchpad .net/bugs/ 1936824 Pool(host= '[REDACTED] ', port=8786): Max retries exceeded 44b2693dd5f231a 6b812a/ shares/ detail (Caused by SSLError( 1, '[SSL: CERTIFICATE_ VERIFY_ FAILED] certificate verify python3/ dist-packages/ urllib3/ connection. py:391: arning: Certificate for [REDACTED] has no `subjectAltName`, /github. com/urllib3/ urllib3/ issues/ 497 for details.) python3/ dist-packages/ urllib3/ connection. py:391: arning: Certificate for [REDACTED] has no `subjectAltName`, /github. com/urllib3/ urllib3/ issues/ 497 for details.) python3/ dist-packages/ urllib3/ connection. py:391: arning: Certificate for [REDACTED] has no `subjectAltName`, /github. com/urllib3/ urllib3/ issues/ 497 for details.) python3/ dist-packages/ urllib3/ connection. py:391: arning: Certificate for [REDACTED] has no `subjectAltName`, /github. com/urllib3/ urllib3/ issues/ 497 for details.) -----+- -----+- ------- -----+- ------- +------ -----+- ------- ------- --+---- --+---- ------- ------- -+ -----+- -----+- ------- -----+- ------- +------ -----+- ------- ------- --+---- --+---- ------- ------- -+ -----+- -----+- ------- -----+- ------- +------ -----+- ------- ------- --+---- --+---- ------- ------- -+ /bugs.launchpad .net/snap- openstackclient s/+bug/ 1936824/ +subscriptions
>
> On Mon, Aug 16, 2021, 8:20 PM Billy Olsen <email address hidden>
> wrote:
>
>> The last update for the openstackclients snap includes the ability to
>> use the system provided certs [0]. Are the certs installed into the
>> local system which is being used for the test?
>>
>> [0] - https:/
>> openstackclient
>>
>> ** Changed in: snap-openstackc
>> Status: New => Incomplete
>>
>> --
>> You received this bug notification because you are subscribed to the bug
>> report.
>> https:/
>>
>> Title:
>> Manila rally tests fail when using a cacert.
>>
>> Status in OpenStack Clients Snap:
>> Incomplete
>>
>> Bug description:
>> It seems to be happening because FCE is using the snap openstack
>> client:
>>
>> # snap client:
>>
>> $ /snap/bin/openstack share list
>> HTTPSConnection
>> with url: /v2/623996b41af
>> SSLError(
>> failed (_ssl.c:852)'),))
>>
>> # deb client
>>
>> $ openstack share list
>> <NO ERROR OR WARNING IS SHOWN>
>>
>> # manila command
>>
>> $ manila list
>> /usr/lib/
>> SubjectAltNameW
>> falling back to check for a `commonName` for now. This feature is being
>> removed by major browsers and deprecated by RFC 2818. (See
>> https:/
>> warnings.warn(
>> /usr/lib/
>> SubjectAltNameW
>> falling back to check for a `commonName` for now. This feature is being
>> removed by major browsers and deprecated by RFC 2818. (See
>> https:/
>> warnings.warn(
>> /usr/lib/
>> SubjectAltNameW
>> falling back to check for a `commonName` for now. This feature is being
>> removed by major browsers and deprecated by RFC 2818. (See
>> https:/
>> warnings.warn(
>> /usr/lib/
>> SubjectAltNameW
>> falling back to check for a `commonName` for now. This feature is being
>> removed by major browsers and deprecated by RFC 2818. (See
>> https:/
>> warnings.warn(
>>
>> +----+-
>> | ID | Name | Size | Share Proto | Status | Is Public | Share Type Name
>> | Host | Availability Zone |
>>
>> +----+-
>>
>> +----+-
>>
>> To manage notifications about this bug go to:
>>
>> https:/
>>
>>